# CVEs published 2024-10-13

18 CVEs were published on October 13, 2024: 1 critical, 9 high. Days are UTC.

- [CVE-2024-7099](https://cve.now/CVE-2024-7099.md): SQL Injection in netease-youdao/qanything (CVSS 9.8, netease-youdao/qanything)
- [CVE-2024-9918](https://cve.now/CVE-2024-9918.md): HuangDou UTCMS sql.php RunSql sql injection (CVSS 5.1, HuangDou UTCMS)
- [CVE-2024-8070](https://cve.now/CVE-2024-8070.md): CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that exposes test credentials in the firmware binary (CVSS 8.5, Schneider Electric EVlink Home Smart · Schneider Electric S…)
- [CVE-2024-9917](https://cve.now/CVE-2024-9917.md): HuangDou UTCMS template\_creat.php deserialization (CVSS 5.3, HuangDou UTCMS)
- [CVE-2024-9916](https://cve.now/CVE-2024-9916.md): HuangDou UTCMS cli.php os command injection (CVSS 6.9, HuangDou UTCMS)
- [CVE-2024-9915](https://cve.now/CVE-2024-9915.md): D-Link DIR-619L B1 formVirtualServ buffer overflow (CVSS 8.7, D-Link DIR-619L B1)
- [CVE-2024-9914](https://cve.now/CVE-2024-9914.md): D-Link DIR-619L B1 formSetWizardSelectMode buffer overflow (CVSS 8.7, D-Link DIR-619L B1)
- [CVE-2024-9913](https://cve.now/CVE-2024-9913.md): D-Link DIR-619L B1 formSetRoute buffer overflow (CVSS 8.7, D-Link DIR-619L B1)
- [CVE-2024-9912](https://cve.now/CVE-2024-9912.md): D-Link DIR-619L B1 formSetQoS buffer overflow (CVSS 8.7, D-Link DIR-619L B1)
- [CVE-2024-9911](https://cve.now/CVE-2024-9911.md): D-Link DIR-619L B1 formSetPortTr buffer overflow (CVSS 8.7, D-Link DIR-619L B1)
- [CVE-2024-9910](https://cve.now/CVE-2024-9910.md): D-Link DIR-619L B1 formSetPassword buffer overflow (CVSS 8.7, D-Link DIR-619L B1)
- [CVE-2024-9909](https://cve.now/CVE-2024-9909.md): D-Link DIR-619L B1 formSetMuti buffer overflow (CVSS 8.7, D-Link DIR-619L B1)
- [CVE-2024-6959](https://cve.now/CVE-2024-6959.md): Denial of Service (DOS) in multipart boundary while uploading file in parisneo/lollms-webui (CVSS 7.1, parisneo/lollms-webui)
- [CVE-2024-9908](https://cve.now/CVE-2024-9908.md): D-Link DIR-619L B1 formSetMACFilter buffer overflow (CVSS 5.1, D-Link DIR-619L B1)
- [CVE-2024-9907](https://cve.now/CVE-2024-9907.md): QileCMS Verification Code Forget.php sendEmail password recovery (CVSS 6.3, QileCMS)
- [CVE-2024-9906](https://cve.now/CVE-2024-9906.md): SourceCodester Online Eyewear Shop cross site scripting (CVSS 5.3, SourceCodester Online Eyewear Shop)
- [CVE-2024-9905](https://cve.now/CVE-2024-9905.md): SourceCodester Online Eyewear Shop sql injection (CVSS 5.3, SourceCodester Online Eyewear Shop)
- [CVE-2024-9904](https://cve.now/CVE-2024-9904.md): 07FLYCMS/07FLY-CMS/07FlyCRM pictureUpload unrestricted upload (CVSS 5.1, 07FLYCMS · 07FLY-CMS +1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2024-10-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.